Commit Graph

69 Commits (ffc58fcedba09d3fe6f91ee8731ef14bd3d513e3)

Author SHA1 Message Date
Stephen Shelton 273270916e
The Great Wall of Blame
This commit reflects changes to clang-format rules. Unfortunately,
these rule changes create a massive change to the codebase, which
causes an apparent rewrite of git history.

Git blame's --ignore-rev flag can be used to ignore this commit when
attempting to `git blame` some code.
4 years ago
Jason Rhinelander 870062e8cc Remove absl optimization
This was being used to get at gcc/clang's __builtin_expect, but we don't
really need that: we can just avoid the check entirely when not in debug
mode which should be even faster.
4 years ago
Jason Rhinelander f84ce61d66 Removed empty cpp files
These aren't needed: CMake already knows how to follow #includes and
rebuild when headers change as long as the headers are included
*somewhere*.  The extra .cpp files here just require building a bunch of
.cpp files with just header content that we just end up throw away
during linking (since the same things will also be compiled in whatever
other compilation units include the same headers).
4 years ago
Jason Rhinelander 8cd95c01b3 Abstract signing hash data location
This makes the interface a little cleaner by not requiring the class
user to know how we laid out the data in the object.
4 years ago
Jason Rhinelander 739ce92aeb Remove unused ristretto includes 4 years ago
Jason Rhinelander f1171ed7a2 make format 😠 🤮 4 years ago
Jason Rhinelander cd8f26deff Use hash instead of random for signing hash data
This makes PrivateKey store both the key followed by the hash.  For
PrivateKeys based on SecretKeys this just means the second half of the
SHA-512 of the seed, and makes a PrivateKey constructed from a SecretKey
give an identical signature to signing directly with sodium.

For derived keys we use a ShortHash of the root key's signing hash
concatenated with the publicly known hash value, so that our derived key
signing hash will be different from the root signing hash and also
different for different derivation parameters.

This also changed one of the asserts in crypto_noop, but upon closer
inspection the copying of the secret key into the signature seems really
wrong, so just changed them to fill with 0s.
4 years ago
Thomas Winget afd87eedb4 NO CLAMPS YOU IDIOT!!! 4 years ago
Thomas Winget a487982c49 initial implementation of blinded sign -- not working yet 4 years ago
Jason Rhinelander f7cd10a82e Fix Recalculate()
Recalculate did what should have been the right thing but wasn't because
of libsodium's mislabelling the "seed" as the secret key.
4 years ago
Jason Rhinelander 860c5efd47 Derived key fixes
The reason things weren't working here is because libsodium does
something completely unintuitive and called the seed the "secret key"
when it isn't, it's the seed.

This adds a new PrivateKey class (alongside the existing SecretKey and
PubKey) that holds just a private key value but no seed -- which we need
to do because there is no way we can get a seed after calculating a
derived keypair.

With these changes, we now generate exactly the same keys and subkeys as
Tor (and a new test case uses values generated in Tor to verify this).

This is incomplete -- the subkey signing code is still not implemented;
it has to be adapted to create a signature from a PrivateKey rather than
a SecretKey which will probably requiring working around/reimplementing
some of what libsodium does for creating a signature since it expects
"secret keys" i.e. the seed.
4 years ago
Jeff Becker 0f13591802
does not work 4 years ago
Jeff Becker 99eb7726ff
initial dht key blinding 4 years ago
Jeff Becker f29083f765 more travis fixes 5 years ago
Jeff Becker 098915bb8e
add check for identity key validity 5 years ago
Jeff Becker 065b022427
std::move 5 years ago
Jeff Becker b8f773eb73
use lambda 5 years ago
Jeff Becker 250cfea1e9
remove use of void * in godawful old code from a time before happyness 5 years ago
Jason Rhinelander b0ab703c45 Silence unused variable warnings in release build 5 years ago
Jeff Becker 01c4a9c287
revert a few things 5 years ago
jeff aedcaf3c43 make it compile 5 years ago
jeff 1cdd9ba13a add unit test for identity_keygen 5 years ago
jeff ff8c167362 make it compile on windows 5 years ago
jeff 0e2fb6abd5 revert to ed25519 for signing, this breaks everything (again). 5 years ago
Michael edd0ec398f
Move thread stuff to subdirectory 5 years ago
Michael 1aec0dfa2b
Move logging to subdirectory 5 years ago
Michael 16cdfbd5f0
clang-tidy modernize pass 5 years ago
Thomas Winget 38fd0552d3 Adds Link-Relay Status Messages
Success case:
  - the path endpoint creates and sends a LR_StatusMessage upon
    successful path creation

Failure case:
  - an intermediate hop creates and sends a LR_StatusMessage upon
    failure to forward the path to the next hop for any reason

Both cases:
  - transit hops receive LR_StatusMessages and add a frame
    to them reflecting their "status" with respect to that path
  - the path creator receives LR_StatusMessages and decrypts/parses
    the LR_StatusRecord frames from the path hops.  If all is good,
    the Path does as it would when receiving a PathConfirmMessage.
    If not, the Path marks the new path as failed.

LR_StatusMessage is now used/sent in place of PathConfirmMessage
5 years ago
Michael 5fdd68fa44
exceptions BE GONE 5 years ago
Jeff Becker b9bcc2b775
make threadpool consice 5 years ago
Jeff Becker 4e355327d8
Merge remote-tracking branch 'origin/master' into ipv6-tun 5 years ago
Jeff Becker 6c1a04e804
reset errno and make unit tests pass 5 years ago
Jeff Becker bf3212820b
finish up issue 17 5 years ago
Jeff Becker 38d5a4855a
finish up issue 17 5 years ago
Jeff Becker 0808060a61
fix previous commit 5 years ago
Jeff Becker a51f4c8328
make debian stable happy 5 years ago
Michael 8323725509
Initial No-Op Crypto implementation 5 years ago
Michael a62655d501
Move tests to use top-level LlarpTest 5 years ago
Michael 491fee206b
Port code to use CryptoManager over passing Crypto pointers 5 years ago
Michael aea0e32efc
Add CryptoManager class to provide a guard-style class to manage the current Crypto instance 5 years ago
Michael dd8a93a400
Apply rule of zero to code base 5 years ago
Jeff Becker d50b18d7b0
try fixing leak also make format 5 years ago
Jeff f8679b6405 fix size 5 years ago
Michael 4143472a17
Add cmake module to target a library as 'system', and fix a few warnings 5 years ago
Jeff Becker 94eb37d490
bundle RC in build record to improve build success rates. 5 years ago
Jeff Becker 5399b93270
make format and readd win32 console color logging 5 years ago
Jeff Becker 230e84c742
make signing work 5 years ago
Jeff ff18ba229a
Merge pull request #411 from majestrate/staging
change signing algo
5 years ago
Jeff Becker ee283547b5
change signature scheme and fucking hope that the rest of the code doesn't fug itself over ;~; 5 years ago
Ryan Tharp 95f8f641e1 Merge branch 'staging' of https://github.com/loki-project/loki-network into staging 5 years ago